Vulnerabilities coverage from CloudSec Pulse holds 71 articles, 27 of them reference guides. The newest was published on October 19, 2026. New stories are added as soon as they are confirmed, from more than 150 sources checked as often as every 45 seconds. Each story lists its sources. Primary sources we follow for this section include FIRST: Common Vulnerability Scoring System and MITRE CWE.
Attackers are actively exploiting a command injection flaw in SiteGuard Server Edition to gain full system control. Organizations must verify exposure before patching.
A critical SQL injection flaw in Arraytics Booktics versions up to 1.0.29 allows attackers to manipulate database queries and compromise sensitive information.
Critical remote code execution flaws in Drupal core and a contributed module require urgent updates across all supported versions before exploits spread.
AWS patches two vulnerabilities in FreeRTOS-Plus-TCP that allow remote attackers to manipulate IPv6 routing and DNS resolution on embedded devices.
Researchers found sites using HTTP headers to send malicious instructions to AI agents, posing operational risks for businesses relying on automated web tools.
Untuned web application firewalls block legitimate traffic while missing sophisticated attacks that mimic normal user behavior.
Logging libraries often execute untrusted input as code, turning debug messages into remote execution vectors that bypass standard application firewalls.
Windows privilege escalation exploits misconfigurations and code flaws to bypass security boundaries, allowing standard users to gain administrative control over the system.
Default settings prioritize ease of use over security, leaving hidden attack surfaces open to exploitation that require manual remediation.
Wormable flaws bypass user interaction entirely, allowing malware to spread across networks at machine speed without any human clicking a malicious link.
Most data breaches start with misconfigured permissions that allow internal users or attackers to read files they should never access, turning simple settings into critical security gaps.
Disconnecting medical devices from the network without proper isolation often causes greater operational harm than the vulnerability itself during an active incident.
Host header injection exploits trust in server configuration, allowing attackers to manipulate email links and cache data without executing code on the server.
Hardening the kernel requires limiting user actions before they reach the core, because once code executes there, traditional security controls fail completely.
CSAF advisories convert vendor noise into machine-readable data, allowing systems to prioritize fixes based on actual exposure rather than fear.
A critical flaw in OPNsense firewalls allows privilege escalation through manipulated GeoIP data, requiring immediate updates to version 26.1.11.
Misconfigured assertion validation allows attackers to forge valid identity tokens and access protected resources without proper credentials.
Public exploit code for a critical authentication bypass in FortiClient EMS allows unauthenticated attackers to seize control of endpoint management systems.
A vulnerability in the .NET client for Amazon S3 lets attackers alter metadata to decrypt objects, requiring immediate upgrades for affected versions.
A high-severity flaw in Microsoft SQL Server versions 2017 through 2022 allows authorized users to run code remotely, posing operational risks to businesses relying on these databases.
A critical vulnerability in Redash versions 26.0.0 through 26.9.0 allows attackers with query access to steal application secrets and write files to the server.
A critical heap overflow in Juniper’s service-deployment daemon allows unauthenticated attackers to seize full control of network devices.
A critical flaw in Junos OS Evolved lets low-privilege TACACS users gain root access, threatening operational security for networks using specific versions.
A high-severity algorithmic complexity flaw in Microsoft .NET libraries allows remote attackers to disrupt services across Windows, Linux, and macOS platforms.